Credit Card Thieves Ran a Polite, Professional Help Desk
Alleged business operation attacked security's weak link: retailers.
Amit Sinha, vice president and chief technology officer at AirDefense Inc., a wireless security vendor in Alpharetta, Ga., said retail firms "have been lagging significantly," despite being a favorite target.
Retailers that lose data risk customer ill will, of course, but they also can face action by the Federal Trade Commission for letting it happen, said Richard Hackett, an adjunct professor at Boston University's School of Law.
DSW Inc. had its data stolen, allegedly by the same group of thieves, in 2005, prompting action against the shoe retailer by the FTC. In a settlement reached that same year, DSW agreed to security improvements and regular audits.
Along with Dave & Buster's and DSW, other retailers known to have been targeted include BJ's Wholesale Club, TJX, OfficeMax, Barnes & Noble, Boston Market, Sports Authority and Forever 21, according to the DOJ.
The FTC's view is that "it is unfair to consumers to take their information and place it in a system that is not reasonably secure from unauthorized access," said Hackett.
Maksym "Maksik" Yastremskiy
Receive the latest security news as it breaks.
